Legal & Compliance
Supplier Code of Conduct
Minimum standards for vendors, contractors, agents, and other suppliers.
Effective and last updated: July 13, 2026
This public policy is a baseline. A signed order form, enterprise agreement, or data-processing agreement may contain additional terms and prevails to the extent of a conflict.
Lawful and ethical business
- Comply with applicable law, permits, sanctions, export controls, competition rules, tax, records, and anti-money-laundering duties.
- Prohibit bribery, kickbacks, facilitation payments, fraud, undisclosed conflicts, deceptive conduct, and retaliation.
- Respect intellectual property, confidentiality, privacy, human rights, fair employment, freedom of association where lawful, health and safety, and environmental obligations.
Security and data
- Use risk-appropriate access control, encryption, secure development, vulnerability management, logging, resilience, personnel controls, and incident response.
- Process HEOSSI, customer, or personal data only for authorised purposes, through approved locations and subprocessors, with required deletion or return.
- Notify HEOSSI without undue delay of any incident, legal demand, control failure, or material change affecting supplied services or data.
Supply chain and audit
Suppliers must flow relevant obligations to their own material suppliers and maintain evidence of compliance. HEOSSI may request reasonable documentation or conduct a risk-based review, subject to confidentiality and proportionality. Suppliers must remediate material findings promptly. Serious or repeated non-compliance may result in suspension or termination.
Reporting
Potential violations should be reported to legal@heossi.com. Suppliers must protect reporters from retaliation and cooperate with lawful investigations and corrective action.